Warning: Poorly Secured Linux SSH Servers Under Attack for Cryptocurrency Mining
ID: 1bb6be96-b1dc-592d-a6da-1caf6d8b2ce4
STIX ID: report--1bb6be96-b1dc-592d-a6da-1caf6d8b2ce4
Feed Name: The Hacker News
AhnLab/ASEC warns that attackers are brute-forcing SSH on poorly secured Linux servers to install port scanners and dictionary-attack tools which scan for additional vulnerable hosts and propagate infections; compromised machines are used for cryptocurrency mining, DDoS, or selling credentials. The report highlights simple reconnaissance commands (e.g., checking CPU cores via /proc/cpuinfo), ties to known tooling dating back to 2021, and recommends strong, rotated passwords and timely patching.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
